Senior IT Security Engineer

Job Summary

Owning the IT and security practice, the full-time remote Senior IT Security Engineer will manage compliance programs, conduct security assessments, and oversee security measures across various platforms to ensure the integrity and safety of the organization.

Key responsibilities

• Drive the annual SOC 2 Type 2 audits and manage the compliance program end to end
• Complete security questionnaires and assessments for hospital clients, ensuring compliance and security standards are met
• Manage security across AWS, Heroku, Cloudflare, Google Workspace, and other tools, while administering the laptop fleet for a remote team

Required qualifications

• Minimum of five years of experience in IT security and compliance
• Proven experience managing a SOC 2 Type 2 audit cycle
• Strong knowledge of cloud security, particularly with AWS and Cloudflare
• Experience with security tools such as IAM, EDR/XDR, SIEM, and GRC platforms like Vanta
• Familiarity with AI security and risk assessments related to AI tools and vendors